Test design, vulnerability assessment, and quality assurance (13.1K skills)
Find similar vulnerabilities across a codebase after discovering one instance. Uses pattern matching, AST search, Semgrep/CodeQL queries, and manual tracing to propagate findings. Adapted from Trail of Bits. Use after finding a bug to check if the same pattern exists elsewhere.
The English summary is being prepared. Showing the original description.
Comprehensive testing workflow - unit tests ∥ integration tests → E2E tests
The English summary is being prepared. Showing the original description.
Test pyramid decision matrix, coverage targets, when to write which test type, mock vs real dependency decisions, and test ROI analysis.
The English summary is being prepared. Showing the original description.
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
The English summary is being prepared. Showing the original description.
SOC2 Type II compliance - Trust Service Criteria, access controls, audit logging, change management, incident response, evidence collection
The English summary is being prepared. Showing the original description.
Python testing strategies using pytest, TDD methodology, fixtures, mocking, parametrization, and coverage requirements.
The English summary is being prepared. Showing the original description.
Release preparation workflow - security audit → E2E tests → review → changelog → docs
The English summary is being prepared. Showing the original description.
Self-healing codebase system. Monitors runtime errors, test failures, and build breaks. Automatically diagnoses root cause, generates fix, validates fix, and applies if safe. Zero human intervention for routine failures.
The English summary is being prepared. Showing the original description.
Static Application Security Testing patterns, OWASP Top 10 checklist, language-specific vulnerability patterns, Semgrep rule writing guide, and CI/CD integration. Use when scanning code for security vulnerabilities or writing custom SAST rules.
The English summary is being prepared. Showing the original description.
Pre-launch verification across infrastructure, security, legal, payment, email, analytics, and performance. Day-1 monitoring, rollback plan, incident response skeleton, and post-launch week-1 checklist.
The English summary is being prepared. Showing the original description.
Payment provider abstraction, webhook security, subscription lifecycle, dunning flows, pricing models, invoicing, tax handling, and refund patterns for SaaS applications.
The English summary is being prepared. Showing the original description.
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
The English summary is being prepared. Showing the original description.
Security audit workflow - OWASP Top 10, input validation, auth, secret detection, vulnerability scan
The English summary is being prepared. Showing the original description.
RevenueCat SDK entegrasyon pattern'leri. iOS (Swift), Android (Kotlin), React Native ve Flutter icin setup, offerings, entitlement checking, webhook integration, StoreKit 2 migration ve sandbox testing.
The English summary is being prepared. Showing the original description.
Formal theorem proving with research, testing, and verification phases
The English summary is being prepared. Showing the original description.
Property-based testing (PBT) patterns with fast-check (JS/TS), Hypothesis (Python), and gopter (Go). Generate random inputs, define invariants, shrink failures to minimal cases. Adapted from Trail of Bits. Use when testing pure functions, parsers, serializers, state machines, or any code where example-based tests miss edge cases.
The English summary is being prepared. Showing the original description.
Ethical security testing methodology - 5-phase pipeline, OWASP checklist, proof levels, structured findings
The English summary is being prepared. Showing the original description.
AI-powered paywall optimizasyon. Sektore gore otomatik analiz, A/B test senaryolari, churn prediction sinyalleri, push notification stratejileri, agresif satis teknikleri ve RevenueCat Experiments entegrasyonu. paywall-strategy, revenuecat-patterns ve subscription-pricing skill'lerinin ustune insa eder.
The English summary is being prepared. Showing the original description.
Load testing with k6/Artillery, response time thresholds, memory leak detection, N+1 query detection, and CI integration.
The English summary is being prepared. Showing the original description.
PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.
The English summary is being prepared. Showing the original description.
Mutation testing ile test suite kalitesini olc. Stryker, mutmut, go-mutesting destegi.
The English summary is being prepared. Showing the original description.
Security scan, dead code detection, and code quality audit for any project
The English summary is being prepared. Showing the original description.
Example template for project-specific skill files covering architecture, patterns, testing, and deployment.
The English summary is being prepared. Showing the original description.
Agent arasi iletisim sablonlari. Standard handoff, QA verdict (PASS/FAIL), escalation, bug report, security finding ve status update formatlari.
The English summary is being prepared. Showing the original description.